update oidc scope
passport-openidconnect adds the 'openid' scope to the request, regardless of if its already there. removed 'openid' scope removed unused 'groups' scope
mstrhakr committed
Sep 3, 2022 at 18:17 UTC
c8774e700bba0aa61863d79cfa4e1569bcfffb8f
1 file changed
+1
-1
webserver.js
+1
-1
@@ -6902,7 +6902,7 @@ module.exports.CreateWebServer = function (parent, db, args, certificates, doneF
6902
userInfoURL: domain.authstrategies.oidc.userinfourl,
6903
clientID: domain.authstrategies.oidc.clientid,
6904
clientSecret: domain.authstrategies.oidc.clientsecret,
6905
- scope: ['openid profile email groups'],
6905
+ scope: ['profile email'],
6906
};
6907
var OIDCStrategy = require('passport-openidconnect');
6908
if (typeof domain.authstrategies.oidc.callbackurl == 'string') { options.callbackURL = domain.authstrategies.oidc.callbackurl; } else { options.callbackURL = url + 'oidc-callback'; }